Change from audio group to something else

[Jonas Smedegaard]

Quoting Kaj Ailomaa (2014-10-26 22:27:33)
> On Sun, Oct 26, 2014, at 09:32 PM, Jonas Smedegaard wrote:
>> Seems to me that goal of 
>> <https://wiki.ubuntu.com/Audio/TheAudioGroup> is to move from POSIX 
>> groups to dynamically allocated access rights.
>>
>> Would it perhaps be possible and better to similarly allocate the 
>> right to realtime priviledge, using some mechanisms too modern for me 
>> to have learned yet (systemd, dbus, etc.)?
>>
>>
>
> I have myself yet only partly understood a way to implement the usage 
> of cgroups to grant realtime privilege. A plus, security wise, is that 
> applications can be listed, so that only they are granted realtime 
> privilege.
> Haven't done any testing yet, so not sure how practical this would be. 
> The example I saw did require the usage of a group, though, but 
> perhaps there is a way to not need it.

Oh, you already tinkered with it.  Cool!  Crossing my fingers you figure 
it out!


> Other methods, I don't know of. And I don't know of anyone using any 
> either.
>
> I'm looking to solve this problem as universally as possible, and in 
> any way I know how that works. So, anyone have any good ideas?

Not sure if you still consider use of classic POSIX group for this, just 
renaing to be another than audio.  If you do, then let me try again to 
explain my point:

The Ubuntu wiki page mentions the reason for avoiding static Audio group 
being that it grants users control over audio devices, even when not 
logged in (you can start a long-running backgorund job or a cron job).

Now, if realtime tasks are defined using POSIX group then it similarly 
grants users control over the ability to freeze the system, even when 
not logged in.

If not possible to move away from POSIX group, I see no reason to change 
from group "audio" to group "jack" or "jackuser" - other than being in 
sync with other distros, but what 's the actual benefit of that?


 - Jonas

-- 
 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/

 [x] quote me freely  [ ] ask before reusing  [ ] keep private
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 949 bytes
Desc: signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-multimedia-maintainers/attachments/20141026/8d1e5014/attachment.sig>